Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server
named Server1 that runs Windows Server 2016.
A domain-based Group Policy object (GPO) is used to configure the security policy of Server1.
You plan to use Security Compliance Manager (SCM) 4.0 to compare the security policy of Server1 to the
WS2012 DNS Server Security 1.0 baseline.
You need to import the security policy into SCM. What should you do first?1

A.
From Security Configuration and Analysis, use the Export Template option.

B.
Run the Copy-GPO cmdlet and specify the -TargetName parameter.

C.
Run the Backup-GPO cmdlet and specify the -Path parameter.

D.
Run the secedit.exe command and specify the/export parameter.

Explanation:
https://technet.microsoft.com/en-us/library/ee461052.aspx
Backup-GPO cmdlet and specify the -Path parameter creates a GPO backup folder with GUID name and is
suitable to import to SCM 4.0